Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.5
CVE-2018-3696: Intel RAID Web Console 3 lets local users become admins
CVE-2018-3696 · published 7 years ago
Summary
The web management interface for Intel RAID Web Console 3 on Windows can be tricked into granting full administrative rights to someone with only normal user access on the same computer. This could let an employee or anyone with local access change RAID settings or view sensitive data. Apply the latest update from Intel or restrict console access to trusted administrators.
What to do
- Update intel raid_web_console_3 to version 4.186 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| intel | raid_web_console_3 |
< 4.186 cpe:2.3:a:intel:raid_web_console_3:*:*:*:*:windows:*:*:* |
Original advisory text
Authentication bypass in the Intel RAID Web Console 3 for Windows before 4.186 may allow an unprivileged user to potentially gain administrative privileges via local access.
Authentication bypass in the Intel RAID Web Console 3 for Windows before 4.186 may allow an unprivileged user to potentially gain administrative privileges via local access.
References
- http://www.securityfocus.com/bid/106028 Third Party Advisory VDB Entry
- https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00196.... Vendor Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Type
CWE-287Improper Authentication
Timeline
Published14 Nov 2018
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2018-3696 · NVD
Track software like this
Free during beta